Users being prompted for unrecognized MFA factors, such as a wrong phone number or unregistered MFA factor, can occur if someone registered their phone number to the wrong username. This would cause the MFA system to associate the incorrect phone number with the user's account, leading to unexpected prompts.